Static task
static1
Behavioral task
behavioral1
Sample
fd488abb7cb975e66d9c481905fae857_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd488abb7cb975e66d9c481905fae857_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fd488abb7cb975e66d9c481905fae857_JaffaCakes118
-
Size
73KB
-
MD5
fd488abb7cb975e66d9c481905fae857
-
SHA1
73305d298d1d168bad0836cc828f2dc5c658dbbb
-
SHA256
19f98edad71f837f015b3ee568d22e7aa5bad4d2a04ae054382337ce1eefd882
-
SHA512
51ff226679e554ea995580b47e70e1df686a7402a87b7854173f2a2171eb2935f5fa51fad5badd0db40ef00d0bbe453379ba5400584c45709ac43b994395555f
-
SSDEEP
1536:kEvdK6j9yeEf5zHNQcuP0QFH4DA7p5Dujx8DagPznV:kEFhEf5ztR3utSx8DagPDV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd488abb7cb975e66d9c481905fae857_JaffaCakes118
Files
-
fd488abb7cb975e66d9c481905fae857_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 70KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ